ba1c9a5ec6aa3c4fce995803e11c0ff8479ee34729d79e5ac5b313f4d65e94c8

Sharing

Copy URL Twitter E-mail

General

Target
ba1c9a5ec6aa3c4fce995803e11c0ff8479ee34729d79e5ac5b313f4d65e94c8
Size 228KB
Sample240702-wjjqzaycmp
SHA256 ba1c9a5ec6aa3c4fce995803e11c0ff8479ee34729d79e5ac5b313f4d65e94c8
MD5 53359c9f826a4668be076e49c96a9cb7
SHA1 1339f0ea0250663e216da34125490baed93e2b1f
SHA512 b900e7830cc91b2ccaf6bb054e7c680e60decb5149191e986e1d95d03241cefd1004586d406df973f1cfb8a8ccf665b8016297c18e4c5e71eee8b91b633bfebf
SSDEEP 6144:2ELo6jIKrJh/NHlSLkad5oWy63CroyrYh7:2Es6jDPZEYIeWyyCrFrY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba1c9a5ec6aa3c4fce995803e11c0ff8479ee34729d79e5ac5b313f4d65e94c8

File Explorer

ba1c9a5ec6aa3c4fce995803e11c0ff8479ee34729d79e5ac5b313f4d65e94c8

.exe 228KB

ba1c9a5ec6aa3c4fce995803e11c0ff8479ee34729d79e5ac5b313f4d65e94c8

IMPHASH 039b1745d3ec0d69297e0716539e775c
SHA256 ba1c9a5ec6aa3c4fce995803e11c0ff8479ee34729d79e5ac5b313f4d65e94c8
MD5 53359c9f826a4668be076e49c96a9cb7
SHA1 1339f0ea0250663e216da34125490baed93e2b1f
SHA512 b900e7830cc91b2ccaf6bb054e7c680e60decb5149191e986e1d95d03241cefd1004586d406df973f1cfb8a8ccf665b8016297c18e4c5e71eee8b91b633bfebf
SSDEEP 6144:2ELo6jIKrJh/NHlSLkad5oWy63CroyrYh7:2Es6jDPZEYIeWyyCrFrY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetVolumeMountPointW GetComputerNameW SleepEx GetCommProperties GetModuleHandleW GetTickCount ReadConsoleOutputA GlobalAlloc lstrcpynW WriteConsoleW GetModuleFileNameW GetConsoleAliasesW CreateJobObjectW GetProcAddress BuildCommDCBW GetAtomNameA LoadLibraryA UnhandledExceptionFilter InterlockedExchangeAdd AddAtomA FoldStringA lstrcatW EnumDateFormatsW FindFirstVolumeA AreFileApisANSI OpenJobObjectA ZombifyActCtx GetLastError GetConsoleAliasExesLengthA CreateFileA GetConsoleOutputCP MultiByteToWideChar HeapReAlloc HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection Sleep HeapSize ExitProcess HeapCreate VirtualFree HeapFree VirtualAlloc WriteFile GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA ReadFile InitializeCriticalSectionAndSpinCount RtlUnwind GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer SetStdHandle CloseHandle WriteConsoleA

gdi32

GetBoundsRect

advapi32

EnumDependentServicesA

ole32

CoTaskMemRealloc

winhttp

WinHttpAddRequestHeaders

Sharing

General

Malware Config

Signatures

File Explorer

ba1c9a5ec6aa3c4fce995803e11c0ff8479ee34729d79e5ac5b313f4d65e94c8

kernel32

gdi32

advapi32

ole32

winhttp

generic